Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: B6uqX08EQRiwMuZWDSAudXxHwqD3r3To/pSiw8oXMnM=
Subject key identifier: 5D:43:40:B5:3A:7B:1B:5C:E8:55:8F:A0:8B:52:1F:B2:49:C4:0A:DE
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01992C6B1B74E94D74DA29F086F70A8E707D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 01BC
Signing time: Tue 09 Sep 2025 03:00:40 +0000
Manifest this update: Tue 09 Sep 2025 03:00:40 +0000
Manifest next update: Wed 10 Sep 2025 03:00:40 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: xO1hHRv+oNFInEaC7HHc5ngocSWX4XamUkw5EGgDzFA=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:1b:74:e9:4d:74:da:29:f0:86:f7:0a:8e:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Sep 9 03:00:40 2025 GMT
Not After : Sep 10 03:00:40 2025 GMT
Subject: CN=5d4340b53a7b1b5ce8558fa08b521fb249c40ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:a9:6d:f6:89:cb:2d:28:60:ee:de:99:35:
be:52:1a:bc:85:70:08:c2:fa:3a:83:33:36:78:7a:
51:65:bc:fd:db:ce:aa:9f:a5:fa:95:f8:cc:05:a8:
0f:6b:87:eb:e1:27:64:6a:d7:26:52:3c:63:4a:54:
df:b5:af:f6:c1:19:a0:73:e5:9c:e7:c3:75:db:ef:
af:84:0e:21:3e:ad:9c:6a:a8:c3:23:f8:08:a7:76:
96:58:28:d9:02:ad:d4:cb:bf:f4:cb:2b:a4:3e:65:
b6:89:f4:86:da:41:a2:44:27:31:43:d9:9f:f5:ae:
b0:b4:89:c7:c8:ab:05:7c:bb:a9:5b:db:72:1b:d1:
6b:9c:b3:31:c8:fb:9e:da:b6:86:8f:23:10:b2:07:
69:79:42:0c:e3:ad:cb:fa:b9:e3:8f:ad:70:5e:f1:
ce:ee:a4:0a:8a:3b:ea:9a:4e:98:5b:95:c4:81:98:
75:9f:14:d9:52:31:95:c9:f3:6f:73:0d:da:71:e0:
9b:fb:f4:a4:d4:c6:bd:e7:dc:d8:65:c9:5c:17:62:
bc:14:a4:73:b4:90:17:1c:39:4e:fb:d8:ad:c8:32:
2f:6a:3c:3f:b0:ed:70:79:3d:ac:f0:a3:9f:66:a3:
cc:3b:e5:4e:00:75:45:c7:c6:d4:72:d0:b8:82:7b:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:43:40:B5:3A:7B:1B:5C:E8:55:8F:A0:8B:52:1F:B2:49:C4:0A:DE
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bd:8f:02:05:de:14:53:80:60:e4:fb:66:3f:cd:cf:31:f2:
8d:64:2d:83:9a:2d:0c:64:03:84:12:d3:4c:a9:8c:5f:3a:9a:
a7:29:16:9b:c4:73:9e:e0:8d:18:fa:3d:6f:2b:c6:f4:55:fc:
7a:9d:fb:8d:2f:fc:62:49:ed:a9:2e:e4:be:dd:93:76:94:86:
a9:b2:47:b3:ac:e1:04:cc:f0:04:c3:ca:31:55:41:3d:61:4f:
8d:c0:5e:e6:f2:93:c7:81:cc:99:28:eb:c1:1c:85:33:a2:0d:
16:ba:b6:f4:c2:93:5f:91:86:95:a8:2e:46:11:3c:70:e2:41:
85:34:cf:28:8a:c3:46:9d:8b:0a:0b:9e:89:c2:72:d9:d7:50:
ac:f4:36:0f:96:cd:89:d9:f9:2b:81:36:91:84:1d:a5:b1:fa:
1a:65:36:2f:65:04:d2:44:ce:ab:27:38:9a:c5:a6:46:a3:4d:
3c:cf:2f:99:4f:c0:66:4a:f4:cc:34:b1:67:88:b3:6f:0c:ed:
fd:26:49:e9:36:8c:ec:2e:6f:d1:f5:69:a7:b5:d5:6a:99:cb:
82:ed:91:ad:cd:fe:90:df:95:ed:fa:73:de:2a:37:7f:3c:6a:
18:2a:d5:10:a1:c8:c2:a3:cb:07:40:a8:56:ab:cf:48:69:d8:
9f:94:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:24:01 2025 by rpki-client